1 . An apparatus for secure computer readable medium backup, the apparatus 

comprising: 

a computer readable medium having at least a first accessible 
portion and a second encrypted portion; and 

a trusted platform interface module operatively coupled with the 
computer readable medium and configured to communicate with a 
cryptographic module. 

2. The apparatus of claim 1, wherein the cryptographic module comprises a 
trusted platform module (TPM). 

3 . The apparatus of claim 1 , wherein the computer readable medium comprises a 
computer readable peripheral selected from the group consisting of a hard disk drive, a 
universal serial bus storage device, a floppy disk, an optical storage disk, a flash memory 
storage device, and a network attached storage drive. 

4. The apparatus of claim 1, wherein the trusted platform interface module 
further comprises a password module configured to store and transmit an encrypted password 
to the cryptographic module, and receive an unencrypted password from the cryptographic 



00 



module. 




password configured to be decrypted by the cryptographic module that first created the 



encrypted password. 



5. 



The apparatus of claim 4, wherein the encrypted password comprises a unique 
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6. The apparatus of claim 1, wherein the computer readable medium module 
further comprises a backup utility module configured to selectively copy data from a storage 
device source, detect newer versions of data stored on the storage device source, and replace 
older versions of the data on the computer readable medium with newer versions of the data. 

7. A device for secure computer readable medium backup, the device 
comprising: 



comprises a trusted platform interface module configured to communicate with the 
cryptographic module and transmit an encrypted password. 

9. The device of claim 8, wherein the cryptographic module is configured to 
receive the encrypted password from trusted platform interface module, decrypt the 
password, and transmit the decrypted password to the trusted platform interface module. 

10. The device of claim 7, wherein the cryptographic module comprises a trusted 



a motherboard; and 



a cryptographic module coupled to the motherboard and configured to 



communicate with a computer readable medium. 



The device of claim 7, wherein the computer readable medium further 




platform module (TPM). 



and a processor coupled to the memory. 



1 1 . The device of claim 7, wherein the motherboard further comprises a memory, 
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12. The apparatus of claim 7, wherein the computer readable medium comprises a 
computer readable peripheral selected from the group consisting of a hard disk drive, a 
universal serial bus storage device, a floppy disk, an optical storage disk, a flash memory 
storage device, and a network attached storage drive. 

13. A system for secure computer readable medium backup, the system 
comprising: 

a motherboard; 

a cryptographic module coupled to the motherboard configured to 
decrypt encrypted passwords; 

a computer readable medium module having at least a first 
accessible portion and a second encrypted portion; and 

a trusted platform interface module operatively coupled with the 
computer readable media module and configured to communicate with a 
cryptographic module. 

1 4. The system of claim 1 3 , further comprising a password module configured to 
store and transmit an encrypted password to the cryptographic module, and receive an 
unencrypted password from the cryptographic module. 

15. The system of claim 1 3, wherein the encrypted password is configured to be 
decrypted by the cryptographic module that first created the encrypted password. 

16. The apparatus of claim 13, wherein the computer readable medium further 
comprises a backup utility configured to selectively copy data from a storage device source, 
detect newer versions of data stored on the storage device source, and replace older versions 
of the data on the computer readable medium module with newer versions of the data. 

- 19- 

IBM DocketNo.: RPS920030216US1 Kunzler & Associates DocketNo.: 1300.2.35 



17. A computer readable storage medium comprising computer readable code 
configured to carry out a method for secure computer readable medium backup, the method 
comprising: 

providing a computer readable medium having at least a first 
accessible portion and a second encrypted portion; 

initializing a password module according to unique data stored 
within a cryptographic module; 

transmitting an encrypted password to the cryptographic module; 

i 

authenticating the encrypted password; 
decrypting the encrypted password; 

transmitting the decrypted password to the computer readable 
medium module; and 

decrypting the second encrypted portion using the decrypted 
password. 

18. The computer readable storage medium of claim 17, wherein the method 
further comprises copying data from a source storage device, and storing the data in the 
second encrypted portion of the computer readable medium. 

w 

H 

< o S 

O 3 £5 19. The computer readable storage medium of claim 17, wherein the method 

tjSjf £ further comprises restoring data to the source storage device from the computer readable 

n3 £ % 5 medium. 
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20. The computer readable storage medium of claim 17, wherein the method 
further comprises initializing the password module according to unique data stored within a 
second cryptographic module. 



21. The computer readable storage medium of claim 17, wherein the method 
further comprises storing and transporting data in the accessible portion of the computer 
readable medium. 



22. A method for secure computer readable medium backup, the method 
comprising: 

providing a computer readable medium having at least a first 
accessible portion and a second encrypted portion; 

initializing a password module according to unique data stored 
within a cryptographic module; 

transmitting an encrypted password to the cryptographic module; 

authenticating the encrypted password; 

decrypting the encrypted password; 

transmitting the decrypted password to the computer readable 
medium; and 

oo decrypting the second encrypted portion using the decrypted 

< 3 password. 

^jiJI; 23. The method of claim 22, further comprising copying data from a source 

pq E « 3 storage device, and storing the data in the second encrypted portion of the computer readable 

g m medium. 



IBM Docket No.: RPS920030216US1 



-21 - 



Kunzler & Associates Docket No.: 1300.2.35 



24. The method of claim 22, further comprising restoring data to the source 
storage device from the computer readable medium. 



25. The method of claim 22, further comprising initializing the password module 
according to unique data stored within a second cryptographic module. 

26. The method of claim 22, further comprising storing and transporting data in 
the accessible portion of the computer readable medium. 

27. An apparatus for secure computer readable medium backup, the apparatus 
comprising: 

means for providing a computer readable medium having at least a 
first accessible portion and a second encrypted portion; 

means for initializing a password module according to unique data 
stored within a cryptographic module; 

means for transmitting an encrypted password to the cryptographic 
module; 

means for authenticating the encrypted password; 

means for decrypting the encrypted password; 

oo means for transmitting the decrypted password to the computer 

w 

f-H 

< 5 readable medium module; and 

O 5 g < means for decrypting the second encrypted portion using the 

S |£ decrypted password. 



Z w 28. The apparatus of claim 27, further comprising means for copying data from a 

* source storage device, and storing the data in the second encrypted portion of the computer 

readable medium. 
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29. The apparatus of claim 27, further comprising restoring data to the source 
storage device from the computer readable medium. 

30. The apparatus of claim 27, further comprising initializing the password 
module according to unique data stored within a second cryptographic module. 
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